已部署HTTPS证书，如何让www.myapp.com自动跳转至HTTPS？

Hey there! Let's walk through how to set up that automatic HTTPS redirect for your myapp, and talk about where the best place to implement this is.

最优实现位置：服务器层面（Nginx/Apache） #

This is hands down the best spot to handle the redirect. It processes the request before it even reaches your Laravel app, which means less load on your application server and faster redirects for users. Plus, permanent 301 redirects here are search-engine friendly, which helps with SEO.

如果你用Nginx #

Add this server block to your Nginx configuration (usually in /etc/nginx/sites-available/ or similar):

server {
    listen 80;
    server_name www.myapp.com;
    # 301永久重定向到HTTPS，保留原请求路径
    return 301 https://$server_name$request_uri;
}

After adding this, restart Nginx to apply the changes:

sudo systemctl restart nginx

如果你用Apache #

You have two options here—either edit your virtual host config (preferred, more efficient) or use a .htaccess file.

虚拟主机配置

Add these lines to your Apache virtual host file (typically in /etc/apache2/sites-available/):

<VirtualHost *:80>
    ServerName www.myapp.com
    Redirect permanent / https://www.myapp.com/
</VirtualHost>

Restart Apache to activate:

sudo systemctl restart apache2

.htaccess 文件（适合共享主机等无法修改虚拟主机的场景）

Place this in your Laravel project's public directory:

RewriteEngine On

# 检查是否为HTTPS，如果不是则重定向
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

备选方案：Laravel应用层面（中间件） #

If you don't have access to server configuration (like on some shared hosting plans), you can handle the redirect within Laravel using a custom middleware. This is less efficient than server-level redirects, but it works.

Step 1: 创建中间件 #

Run this Artisan command to generate a new middleware:

php artisan make:middleware ForceHttps

Then open app/Http/Middleware/ForceHttps.php and update the handle method:

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;

class ForceHttps
{
    public function handle(Request $request, Closure $next)
    {
        // 只在生产环境强制HTTPS，避免本地开发麻烦
        if (!$request->secure() && app()->environment('production')) {
            // 重定向到HTTPS版本的当前请求路径
            return redirect()->secure($request->getRequestUri());
        }

        return $next($request);
    }
}

Step 2: 注册中间件 #

Open app/Http/Kernel.php and add the middleware to the web middleware group (or global middleware if you want it applied to all routes):

protected $middlewareGroups = [
    'web' => [
        // ... 其他中间件
        \App\Http\Middleware\ForceHttps::class,
    ],
];

额外注意事项 #

• Make sure your .env file has APP_URL=https://www.myapp.com set correctly—you mentioned Laravel already generates HTTPS links, but double-check this to avoid redirect loops.
• Confirm your SSL certificate is properly installed and valid for www.myapp.com—invalid certificates will cause browser warnings even after redirecting.

内容的提问来源于stack exchange，提问作者niko craft